GitHub Advisoryadvisory · Packagist

GHSA-2fx5-pggv-6jjr TYPO3 Potential Open Redirect via Parsing Differences

MEDIUM Published 2025-01-14 Modified 2025-01-15 Official page ↗
Aliases
CVE-2024-55892
Ecosystem
Packagist
Packages
typo3/cms-core
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Weaknesses
CWE-601
Reviewed
2025-01-14

Affected packages

• Packagist typo3/cms-core: >= 9.0.0, < 9.5.49 → fixed in 9.5.49 • Packagist typo3/cms-core: >= 10.0.0, < 10.4.48 → fixed in 10.4.48 • Packagist typo3/cms-core: >= 11.0.0, < 11.5.42 → fixed in 11.5.42 • Packagist typo3/cms-core: >= 12.0.0, < 12.4.25 → fixed in 12.4.25 • Packagist typo3/cms-core: >= 13.0.0, < 13.4.3 → fixed in 13.4.3

Description

Problem Applications that use `TYPO3\CMS\Core\Http\Uri` to parse externally provided URLs (e.g., via a query parameter) and validate the host of the parsed URL may be vulnerable to open redirect or SSRF attacks if the URL is used after passing the validation checks. Solution Update to TYPO3 versions 9.5.49 ELTS, 10.4.48 ELTS, 11.5.42 ELTS, 12.4.25 LTS, 13.4.3 LTS that fix the problem described. Credits Thanks to Sam Mush and Christian Eßl who reported this issue and to TYPO3 core & security team member Benjamin Franzke who fixed the issue. References • TYPO3-CORE-SA-2025-002

Related

Alias · CVE (1)

  • CVE-2024-55892 TYPO3 is a free and open source Content Management Framework. vulnerability

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References